mfeinman asked a question.
Hi all ...
In the on-line help, the document "Configuring FlexNet Manager Suite as a SAML Service Provider ", the section "Configuration information for the Signing Certificates for the identity provider and FlexNet Manager Suite as the service provider" says:
A certificate identifying FlexNet Manager Suite is required when Single Logout is used, or whenever the identity provider requires signed or encrypted communication from the service provider (FlexNet Manager Suite). It allows the service provider to sign SAML assertions to the identity provider, validating the identity of the service provider.
When a service provider's certificate is required, edit these attributes in the serviceCertificates element ...
The sustainsys.saml2 example hints at the use of a .pfx file that, as I understand it, contains both the certificate and the private key:
- <serviceCertificates> <add fileName="~/App_Data/Sustainsys.Saml2.Tests.pfx"/></serviceCertificates>
While not mentioned specifically in the help text, does this mean I must use a certificate file that contains the private key (a .pfx file)?
Also, any chance that [FNMS SAML Setup] WebUI configuration guide to enable SSO / SAML in FlexNet Manager Suite will be updated to refer to sustainsys.saml2 instead of kentorServices?
--Mark
